SUSE-RU-2021:3638-1: important: Recommended update for samba
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Tue Nov 9 17:19:40 UTC 2021
SUSE Recommended Update: Recommended update for samba
______________________________________________________________________________
Announcement ID: SUSE-RU-2021:3638-1
Rating: important
References: #1188727 #1189017 #14571 SLE-18456
Affected Products:
SUSE Linux Enterprise Module for Python2 15-SP3
SUSE Linux Enterprise Module for Public Cloud 15-SP3
SUSE Linux Enterprise Module for Public Cloud 15-SP2
SUSE Linux Enterprise Module for Public Cloud 15-SP1
SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3
SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2
SUSE Linux Enterprise Module for Basesystem 15-SP3
SUSE Linux Enterprise High Availability 15-SP3
______________________________________________________________________________
An update that has three recommended fixes and contains one
feature can now be installed.
Description:
This update for samba fixes the following issues:
Features added:
- Add Certificate Auto Enrollment Policy. (jsc#SLE-18456)
Bugs fixed:
- Fix wrong kvno exported to keytab after net ads changetrustpw due to
replication delay. (bsc#1188727)
- Fix 'net rpc' authentication when using the machine account.
(bsc#1189017)
Samba was updated to 4.13.10
* s3: smbd: Ensure POSIX default ACL is mapped into returned Windows ACL
for directory handles; (bso#14708);
* Take a copy to make sure we don't reference free'd memory; (bso#14721);
* s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);
* s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
change_file_owner_to_parent() error path; (bso#14736);
* samba-tool: Give better error information when the 'domain backup
restore' fails with a duplicate SID; (bso#14575);
* smbd: Correctly initialize close timestamp fields; (bso#14714);
* Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);
* ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
* gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);
* smbXsrv_{open,session,tcon}: Protect
smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records;
(bso#14752);
* samba-tool domain backup offline doesn't work against bind DLZ backend;
(bso#14027);
* netcmd: Use next_free_rid() function to calculate a SID for restoring a
backup; (bso#14669);
Samba was updated to 4.13.9:
* s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success;
(bso#14696);
* Add documentation for dsdb_group_audit and dsdb_group_json_audit to "log
level", synchronise "log level" in smb.conf with the code; (bso#14689);
* Fix smbd panic when two clients open same file; (bso#14672);
* Fix memory leak in the RPC server; (bso#14675);
* s3: smbd: Fix deferred renames; (bso#14679);
* s3-iremotewinspool: Set the per-request memory context; (bso#14675);
* rpc_server3: Fix a memleak for internal pipes; (bso#14675);
* third_party: Update socket_wrapper to version 1.3.2; (bso#11899);
* third_party: Update socket_wrapper to version 1.3.3; (bso#14639);
* idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid conflict;
(bso#14663);
* Fix the build on OmniOS; (bso#14288);
Update to 4.13.7
* Release with dependency on ldb version 2.2.1.
- Fix wrong kvno exported to keytab after net ads changetrustpw due to
replication delay (bsc#1188727)
Patch Instructions:
To install this SUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Module for Python2 15-SP3:
zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2021-3638=1
- SUSE Linux Enterprise Module for Public Cloud 15-SP3:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2021-3638=1
- SUSE Linux Enterprise Module for Public Cloud 15-SP2:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP2-2021-3638=1
- SUSE Linux Enterprise Module for Public Cloud 15-SP1:
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2021-3638=1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3:
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-3638=1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2:
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2021-3638=1
- SUSE Linux Enterprise Module for Basesystem 15-SP3:
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-3638=1
- SUSE Linux Enterprise High Availability 15-SP3:
zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2021-3638=1
Package List:
- SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64):
samba-ad-dc-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-ad-dc-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debugsource-4.13.10+git.236.0517d0e6bdf-3.7.12
- SUSE Linux Enterprise Module for Public Cloud 15-SP3 (aarch64 ppc64le s390x x86_64):
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python3-pykerberos-1.2.1-3.5.1
python3-pykerberos-debuginfo-1.2.1-3.5.1
- SUSE Linux Enterprise Module for Public Cloud 15-SP3 (noarch):
python3-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Public Cloud 15-SP2 (aarch64 ppc64le s390x x86_64):
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python3-pykerberos-1.2.1-3.5.1
python3-pykerberos-debuginfo-1.2.1-3.5.1
- SUSE Linux Enterprise Module for Public Cloud 15-SP2 (noarch):
python3-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Public Cloud 15-SP1 (aarch64 ppc64le s390x x86_64):
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python3-pykerberos-1.2.1-3.5.1
python3-pykerberos-debuginfo-1.2.1-3.5.1
- SUSE Linux Enterprise Module for Public Cloud 15-SP1 (noarch):
python3-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64):
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python2-pykerberos-1.2.1-3.5.1
python2-pykerberos-debuginfo-1.2.1-3.5.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch):
python2-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (aarch64 ppc64le s390x x86_64):
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python2-pykerberos-1.2.1-3.5.1
python2-pykerberos-debuginfo-1.2.1-3.5.1
- SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (noarch):
python2-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64):
certmonger-0.79.13-7.3.1
certmonger-debuginfo-0.79.13-7.3.1
certmonger-debugsource-0.79.13-7.3.1
libdcerpc-binding0-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-binding0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-samr-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-samr0-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-samr0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc0-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-krb5pac-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-krb5pac0-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-krb5pac0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-nbt-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-nbt0-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-nbt0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-standard-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-standard0-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-standard0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr1-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr1-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libnetapi-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libnetapi0-4.13.10+git.236.0517d0e6bdf-3.7.12
libnetapi0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-credentials-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-credentials0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-credentials0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-errors-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-errors0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-errors0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-hostconfig-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-hostconfig0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-hostconfig0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-passdb-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-passdb0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-passdb0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-policy-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-policy-python3-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-policy0-python3-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-policy0-python3-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-util-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-util0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-util0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamdb-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamdb0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamdb0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbclient-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbclient0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbclient0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbconf-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbconf0-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbconf0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbldap-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbldap2-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbldap2-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libtevent-util-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libtevent-util0-4.13.10+git.236.0517d0e6bdf-3.7.12
libtevent-util0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libwbclient-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
libwbclient0-4.13.10+git.236.0517d0e6bdf-3.7.12
libwbclient0-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libxmlrpc++8-1.51.07-7.3.1
libxmlrpc++8-debuginfo-1.51.07-7.3.1
libxmlrpc3-1.51.07-7.3.1
libxmlrpc3-debuginfo-1.51.07-7.3.1
libxmlrpc_abyss++8-1.51.07-7.3.1
libxmlrpc_abyss++8-debuginfo-1.51.07-7.3.1
libxmlrpc_abyss3-1.51.07-7.3.1
libxmlrpc_abyss3-debuginfo-1.51.07-7.3.1
libxmlrpc_client++8-1.51.07-7.3.1
libxmlrpc_client++8-debuginfo-1.51.07-7.3.1
libxmlrpc_client3-1.51.07-7.3.1
libxmlrpc_client3-debuginfo-1.51.07-7.3.1
libxmlrpc_cpp8-1.51.07-7.3.1
libxmlrpc_cpp8-debuginfo-1.51.07-7.3.1
libxmlrpc_packetsocket8-1.51.07-7.3.1
libxmlrpc_packetsocket8-debuginfo-1.51.07-7.3.1
libxmlrpc_server++8-1.51.07-7.3.1
libxmlrpc_server++8-debuginfo-1.51.07-7.3.1
libxmlrpc_server3-1.51.07-7.3.1
libxmlrpc_server3-debuginfo-1.51.07-7.3.1
libxmlrpc_server_abyss++8-1.51.07-7.3.1
libxmlrpc_server_abyss++8-debuginfo-1.51.07-7.3.1
libxmlrpc_server_abyss3-1.51.07-7.3.1
libxmlrpc_server_abyss3-debuginfo-1.51.07-7.3.1
libxmlrpc_server_cgi++8-1.51.07-7.3.1
libxmlrpc_server_cgi++8-debuginfo-1.51.07-7.3.1
libxmlrpc_server_cgi3-1.51.07-7.3.1
libxmlrpc_server_cgi3-debuginfo-1.51.07-7.3.1
libxmlrpc_server_pstream++8-1.51.07-7.3.1
libxmlrpc_server_pstream++8-debuginfo-1.51.07-7.3.1
libxmlrpc_util++8-1.51.07-7.3.1
libxmlrpc_util++8-debuginfo-1.51.07-7.3.1
libxmlrpc_util4-1.51.07-7.3.1
libxmlrpc_util4-debuginfo-1.51.07-7.3.1
python-pykerberos-debuginfo-1.2.1-3.5.1
python-pykerberos-debugsource-1.2.1-3.5.1
python3-pykerberos-1.2.1-3.5.1
python3-pykerberos-debuginfo-1.2.1-3.5.1
samba-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-client-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-client-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-core-devel-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debugsource-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-dsdb-modules-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-dsdb-modules-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-gpupdate-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-ldb-ldap-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-ldb-ldap-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-python3-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-python3-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-python3-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-python3-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-winbind-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-winbind-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
sscep-0.7.0-7.3.1
sscep-debuginfo-0.7.0-7.3.1
sscep-debugsource-0.7.0-7.3.1
xmlrpc-c-debuginfo-1.51.07-7.3.1
xmlrpc-c-debugsource-1.51.07-7.3.1
xmlrpc-c-devel-1.51.07-7.3.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 x86_64):
samba-ceph-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-ceph-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch):
cepces-0.3.4-7.3.1
cepces-certmonger-0.3.4-7.3.1
python3-cepces-0.3.4-7.3.1
python3-requests-kerberos-0.12.0-3.3.1
- SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64):
libdcerpc-binding0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc-binding0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libdcerpc0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-krb5pac0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-krb5pac0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-nbt0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-nbt0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-standard0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr-standard0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr1-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libndr1-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libnetapi0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libnetapi0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-credentials0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-credentials0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-errors0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-errors0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-hostconfig0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-hostconfig0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-passdb0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-passdb0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-util0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamba-util0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamdb0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsamdb0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbconf0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbconf0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbldap2-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libsmbldap2-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libtevent-util0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libtevent-util0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
libwbclient0-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
libwbclient0-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-libs-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-winbind-32bit-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-winbind-32bit-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
- SUSE Linux Enterprise High Availability 15-SP3 (aarch64 ppc64le s390x x86_64):
ctdb-4.13.10+git.236.0517d0e6bdf-3.7.12
ctdb-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debuginfo-4.13.10+git.236.0517d0e6bdf-3.7.12
samba-debugsource-4.13.10+git.236.0517d0e6bdf-3.7.12
References:
https://bugzilla.suse.com/1188727
https://bugzilla.suse.com/1189017
https://bugzilla.suse.com/14571
More information about the sle-updates
mailing list